For your login you are sending the username and password on a query string to the server, in plaintext, which means that information is being passed around in plain text for anyone to see! This is super insecure. You should be using a POST request rather than a GET request, and using the body of the POST request so that the password is hidden.
For your login you are sending the username and password on a query string to the server, in plaintext, which means that information is being passed around in plain text for anyone to see! This is super insecure. You should be using a
POSTrequest rather than aGETrequest, and using the body of thePOSTrequest so that the password is hidden.